{"vulnerability": "cve-2026-1895", "sightings": [{"uuid": "03b89ee6-5e1a-4171-b24a-b8f92ceaa3d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18953", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97115", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-18953\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ronamosa\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 03:45:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-18953 \u2014 arbitrary file write (CWE-22) in awslabs.aws-transform-mcp-server's get_resource tool via the savePath parameter\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-08T06:00:04.632611Z"}, {"uuid": "2170425a-5a57-4ca6-95b8-5140725d2439", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18953", "type": "published-proof-of-concept", "source": "Telegram/HtR3voKuUb4Szlun3fBzuT2ivqN8DL7Kwlo1E3tEtAzGF3w", "content": "", "creation_timestamp": "2026-08-08T23:08:43.545037Z"}, {"uuid": "7b67dd2f-6fe7-4ee7-b013-602921c4f503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18953", "type": "published-proof-of-concept", "source": "Telegram/_6WiR0p1XSX2Nc0kJrGm37A_Y4R5JUMfMftgMiyMuKNyYsM", "content": "", "creation_timestamp": "2026-08-08T23:17:23.973235Z"}, {"uuid": "22a96b20-9eb2-466f-8624-7c291ce1a045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18953", "type": "published-proof-of-concept", "source": "Telegram/_6WiR0p1XSX2Nc0kJrGm37A_Y4R5JUMfMftgMiyMuKNyYsM", "content": "", "creation_timestamp": "2026-08-09T00:38:02.156163Z"}, {"uuid": "eb796a0c-5323-4599-97ca-2790bb719ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18953", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97115", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-18953\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ronamosa\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-08 03:45:53\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-18953 \u2014 arbitrary file write (CWE-22) in awslabs.aws-transform-mcp-server's get_resource tool via the savePath parameter\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-09T00:48:53.613343Z"}, {"uuid": "f5fdbf64-ee73-4e9d-b225-ea07d40bb70b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18953", "type": "published-proof-of-concept", "source": "Telegram/HtR3voKuUb4Szlun3fBzuT2ivqN8DL7Kwlo1E3tEtAzGF3w", "content": "", "creation_timestamp": "2026-08-09T02:00:05.201751Z"}, {"uuid": "ec44ec63-eabf-4fda-a794-77e8776ff479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18953", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3msekrhixql2b", "content": "**\u5bfe\u8c61\u306e\u88fd\u54c1\u3068\u30d0\u30fc\u30b8\u30e7\u30f3:** Amazon awslabs.aws-transform-mcp-server 0.1.0\uff5e0.1.4 **\u8106\u5f31\u6027\u306e\u5185\u5bb9:** get_resource\u30c4\u30fc\u30eb\u306b\u304a\u3051\u2026\nCVE-2026-18953 CVSS 8.6 | HIGH", "creation_timestamp": "2026-08-05T22:20:47.198009Z"}, {"uuid": "588deca4-3835-434b-a1c8-a7f8883c4e62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18952", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msvw76city2l", "content": "\ud83d\udfe0 CVE-2026-18952 - High (8.1)\n\nMissing input validation in the threat intelligence feed parser in the OpenSearch Security Analyt...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18952/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-12T20:00:35.122879Z"}, {"uuid": "971a9236-5fe3-4c5a-a8ce-6211c2a46e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18953", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msex32tqsv2n", "content": "\ud83d\udfe0 CVE-2026-18953 - High (8.6)\n\nImproper limitation of a pathname to a restricted directory in the get_resource tool in Amazon aw...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18953/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-06T02:00:55.669234Z"}, {"uuid": "dcdd80ea-9ff8-4b61-8a77-93b402321845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18953", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msf3up3coo2h", "content": "Another Day, Another Remote Path Escape, Another Vendor Pretending It\u2019s Fine\nPANIC 66% | Lag 0.0h | CVE-2026-18953 is a high-severity path traversal flaw in Amazon's get_resource tool, allowing improp\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-06T03:26:49.630990Z"}, {"uuid": "9cd681dc-6e30-4475-94f4-3cf96c4ce68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18954", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzfwhcca24", "content": "CVE-2026-18954 - Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server #patchmanagement", "creation_timestamp": "2026-08-06T12:15:26.084454Z"}, {"uuid": "e8b2988b-75af-4c70-81db-940e03509f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18953", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3msfzglacrd23", "content": "CVE-2026-18953 - Improper limitation of a pathname in AWS Transform MCP Server #patchmanagement", "creation_timestamp": "2026-08-06T12:15:47.895880Z"}, {"uuid": "74496c41-a736-40d4-aec4-54ff287c6852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18950", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msr7em5vzi2a", "content": "\ud83d\udfe0 CVE-2026-18950 - High (8.8)\n\nA flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerabi...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18950/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T23:01:22.090529Z"}, {"uuid": "b72bcbd8-0901-4ca1-85da-16c0e5317448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18951", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msr7et5p7f2u", "content": "\ud83d\udfe0 CVE-2026-18951 - High (8.8)\n\nA flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-18951/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-10T23:01:29.251232Z"}, {"uuid": "caf73bec-9879-49a4-bb86-3de1294ebb38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18951", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msrdjfgf5c2l", "content": "Red Hat Patch Panic Meets Prague\u2019s Bureaucratic Coma Again\nPANIC 71% | Lag 0.0h | CVE-2026-18951 is a high-severity flaw in the Red Hat OpenShift AI overlay for the training operator\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-11T00:15:37.240345Z"}, {"uuid": "06047f08-fbbf-4ee8-9209-1835550c049f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18950", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3msrdjjue7q2v", "content": "Authenticated User, Meet Your New Kingdom of Broken Dashboards\nPANIC 68% | Lag 0.0h | CVE-2026-18950 is a high-severity flaw in odh-dashboard that lets an authenticated user exploit a vu\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-11T00:15:42.260989Z"}, {"uuid": "2e6c2f5d-9ff6-4ce5-919e-0e890d507961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18952", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3msyfc2d2x62k", "content": "CVE-2026-18952 - Missing Input Validation in OpenSearch Security Analytics Plugin #patchmanagement", "creation_timestamp": "2026-08-13T19:35:56.322675Z"}]}